More sophisticated variants ask you to "log in with Facebook to verify you're human." The moment you enter your own Facebook credentials, the scammers steal them – and then you become the victim.
Regularly check Where You're Logged In and log out of unrecognized devices.
The site records your IP address, the username you entered, the time of the request, and your browser details. This data is later sold to advertisers or other cybercriminals.
Go to Settings > Security and Login > Two-Factor Authentication. Choose either an authenticator app (Google Authenticator, Authy) or SMS codes.
After pretending to "crack" the password, the site shows a screen requesting you to complete a survey, download an app, or share the link on social media. The scammers earn commission from these actions. You can complete a hundred surveys – you will never receive a password.